Add Cypher-style graph expressions to once query

once query now accepts Cypher-style expressions of the form <MATCH ...> RETURN ... for read-only graph exploration. Input is validated with tree-sitter-cypher and evaluated over loaded targets, with documented support for transitive dependency and capability queries.